Amazon warns of exploited PHP vulnerability discovered via AI

Amazon disclosed on Wednesday that a critical vulnerability in PHP, identified using AI tools, is being actively exploited by hackers. The flaw, which was discovered four days before its public disclosure, is now being widely used in the wild. The cloud computing giant warned that the vulnerability, which underpins much of the internet, is being 'broadly exploited' by governments and companies scrambling to secure their systems. Amazon did not specify the exact nature of the vulnerability but emphasized the urgency of patching systems. The incident highlights the growing role of AI in both discovering and exploiting security weaknesses. This follows recent reports of similar vulnerabilities found by OpenAI and Google’s Wiz, which have raised concerns about the potential risks associated with AI-driven security research. The company’s warning comes as organizations worldwide race to update their infrastructure to mitigate the threat. While the exact timeline of the exploit remains unclear, Amazon’s statement underscores the need for immediate action. The breach underscores the dual-edged nature of AI in cybersecurity, where the same tools used to find vulnerabilities can also be weaponized by malicious actors. As the situation unfolds, experts are urging heightened vigilance to prevent further damage.